While investigating new malware submissions to VirusTotal, our researchers discovered the Polis malicious program. It is categorized as ransomware - a type of malware that encrypts data and makes ransom demands for the decryption. Once we executed a sample of Polis on our test system, it encrypte
LOCKEDFILECR is the name of ransomware that our team discovered while inspecting malware samples submitted to the VirusTotal website. Ransomware is malware that encrypts files to prevent victims from accessing them. Threat actors behind ransomware attacks demand payment in return for a decryption
Our team discovered Find My Package For Free after downloading it from a website offering to quickly track packages online. While inspecting this app, we found that it shows annoying advertisements. For this reason, we classified Find My Package For Free as adware (advertising-supported software).
Audio Player is a rogue browser extension that our researchers discovered while inspecting dubious software-promoting websites. This extension is endorsed as a tool capable of reading text in multiple languages and voices. However, our analysis revealed that Audio Player operates as adware instead
While inspecting new submissions to VirusTotal, our researchers discovered the Joker ransomware. This malicious program is part of the VoidCrypt ransomware family. After we executed a sample of Joker on our test machine, it encrypted files and modified their filenames. Original titles were append
While inspecting suspicious software-promoting websites, our research team found an adware-type application called Mobile. This app is designed to run intrusive advertisement campaigns. Additionally, Mobile might have data tracking functionalities. Adware stands for advertising-supported s
While examining the UpSearches browser extension, we discovered that it is a browser hijacker that promotes upsearches.com - a fake search engine. It hijacks a web browser by changing its settings. Typically, users download and add browser-hijacking apps to browsers inadvertently. UpSearch
We discovered the Webpage Text Reader browser extension While inspecting a deceptive web page offering to update a browser. After downloading and adding Webpage Text Reader, we found that it generates annoying advertisements. Therefore, we classified this app as adware. Also, we learned that Webpa
Findhealthinfonow.com is the address of a fake search engine. Websites of this kind are typically promoted by software classified as browser hijackers. They modify browser settings in order to cause redirects to illegitimate search engines. Additionally, both these websites and the software promot
Winxvykljw is ransomware that encrypts files to make them inaccessible/unusable. Winxvykljw is part of the Snatch ransomware family. We discovered it while analyzing malware samples submitted to VirusTotal. We also found that Winxvykljw appends its extension (".winxvykljw") to filenames and create